LG-12871: Remove exceptions for client-side reCAPTCHA execute

[aduth]

🎫 Ticket

LG-12871

🛠 Summary of changes

Updates client-side reCAPTCHA behavior to always invoke during client-side form submission, regardless of whether the user is exempted from backend validation.

This is based on a recommendation to improve the quality of assessments by avoiding bias toward certain subsets of users.

📜 Testing Plan

Prerequisite: You'll need valid reCAPTCHA keys for at least the invisible check. In local development, you can use keys generated yourself with the free version of reCAPTCHA:

1. Go to https://www.google.com/recaptcha/admin
2. Create keys for local development as a "Score based (v3)" type
3. Update configuration in config/application.yml, adding your v3 site and secret keys. v2 values need to be present, but they don't need to be valid keys.

   recaptcha_site_key_v2: 'any-value-doesnt-matter'
   recaptcha_site_key_v3: '[insert-v3-site-key]'
   recaptcha_secret_key_v2: 'any-value-doesnt-matter'
   recaptcha_secret_key_v3: '[insert-v3-secret-key]'
   

Validate that client-side reCAPTCHA runs for all numbers, but is only validated on the backend for international numbers:

1. Go to http://localhost:3000
2. Create an account
3. Continue account creation until MFA selection screen
4. Choose phone as MFA method and click "Continue"
5. Add a breakpoint here in your browser devtools:

   identity-idp/app/javascript/packages/captcha-submit-button/captcha-submit-button-element.ts

   Line 51 in 29ba13f

   this.submit();

6. Add a binding.pry breakpoint before this line:

   identity-idp/app/services/recaptcha_validator.rb

   Line 46 in 29ba13f

   return true if exempt?

7. Enter a phone number
8. Click "Submit"
9. Observe that the breakpoint added in Step 5 is triggered, regardless of phone number
10. Allow breakpoint to continue ("Resume script execution" in Chrome Devtools debugger)
11. Observe in your terminal that that breakpoint added in Step 6 is triggered
12. Enter exempt? in your terminal breakpoint
13. Observe that the value is false if you submitted an international number, or true otherwise

[mdiarra3]

Nice looks good.